You can enable Advanced Authentication for the Administration Console to allow access only to the users who pass the secondary authentication.
To enable Advanced Authentication for Administration console, Privileged Account Manager administrator must perform the following:
On the home page of the Administration Console, click Settings > Server Settings > Authentication.
In the right pane, move the Secondary Authentication Required slider to the right.
To use this, ensure that Netiq Advanced Authentication is enabled.
This setting ensures that the users are prompted for secondary authentication to log in to the Administration Console.
Inactivity Session Timeout: Set the time in minutes when you want to timeout the session when in inactive state.